CVE-2020-36219

The CVE-2020-36219 entry concerns the Rust crate atomic-option, where AtomicOption unconditionally implements Sync. This enables data races when non-Sync types are moved across threads, as reported in multiple sources (RustSec/RUSTSEC-2020-0113 and GHSA/RH updates). Affected component: atomic-opt...

CVE-2020-36220

An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer omits a required T: Send bound, a data race and memory corruption can occur...

CVE-2020-36220

CVE-2020-36220 affects the Rust crate va-ts (before 0.0.4). TheDemuxer type omits a required T: Send bound, allowing non‑Send types to be carried across thread boundaries. This can lead to a data race and memory corruption. The issue is documented in multiple sources (including Red Hat and RustSe...

CVE-2021-25900

An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insertmany...

CVE-2021-25900

CVE-2021-25900 affects the Rust smallvec crate prior to 0.6.14 and 1.x prior to 1.6.1, where SmallVec::insert_many can cause a heap-based buffer overflow. The issue is mitigated by upgrading to smallvec 0.6.14 or 1.6.1. In practice, vulnerable code paths may impact crates that vendor smallvec (e....

CVE-2021-25900

An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insertmany...

CVE-2021-25901

An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data race...

CVE-2021-25901

CVE-2021-25901 concerns the lazy-init crate for Rust, where the absence of a Send bound enables data races in safe code. Consequence is potential data contention and non-deterministic behavior if the crate is used in multi-threaded contexts. Public advisories (RustSec/RustSec-advisory style) desc...

CVE-2021-25902

An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, maparray can perform a double drop...

CVE-2021-25902

The CVE-2021-25902 issue affects the Rust crate glsl-layout prior to 0.4.0, where panicking inside the user-provided function f of map_array can cause a double drop of a single object. The root cause is inadequate handling of panic, allowing the object to be dropped twice. The vulnerability was m...

CVE-2021-25903

An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced...

CVE-2021-25903

The CVE-2021-25903 entry concerns the Rust cache crate, where a raw pointer is dereferenced. Multiple connected sources (RustSec advisory RUSTSEC-2021-0006, OSV/NVD listings, Red Hat/RH CVE pages, and related advisories) describe a null/dereferenced-pointer issue in versions through 2021-01-01, c...

CVE-2021-25905

The CVE-2021-25905 issue affects the Rust crate bra (before 0.1.1). It is a soundness flaw where an uninitialized memory region could be read, exposed by an implementation (GreedyAccessReader) that reads from a buffer during BufRead. The vulnerability is addressed by updating the crate to version...

CVE-2021-25906

CVE-2021-25906 affects the Rust crate basic_dsp_matrix prior to version 0.9.2. A panic in TransformContent can trigger a double drop, leading to potential memory corruption. Multiple sources (Red Hat CVE, GHSA, OSV, RustSec advisory) confirm the issue and point to the same root cause: unsafe hand...

CVE-2021-25906

An issue was discovered in the basicdspmatrix crate before 0.9.2 for Rust. When a TransformContent panic occurs, a double drop can be performed...

CVE-2021-25907

An issue was discovered in the containers crate before 0.9.11 for Rust. When a panic occurs, a util::mutate,mutate2 double drop can be performed...

CVE-2021-25907

CVE-2021-25907 affects the Rust containers crate prior to 0.9.11. When a panic occurs in a user-provided function, a double drop may be performed on util::{mutate, mutate2}, risking memory corruption due to temporary ownership duplication (ptr::read). The issue has been addressed in version 0.9.1...

CVE-2021-25908

An issue was discovered in the fil-ocl crate through 2021-01-04 for Rust. From can lead to a double free...

CVE-2021-25908

The CVE-2021-25908 issue affects the fil-ocl crate for Rust (up to 2021-01-04) where the From path can lead to a double free. The vulnerability is described across multiple sources (e.g., RustSec advisory RUSTSEC-2021-0011 and related CVE entries) and is tied to conversions from EventList, with t...

CVE-2021-21269

Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust join method without checking user input might have made it abe to do a Path Traversal attack causing to read more...